Controlling traffic

in the unmanaged environment you can't control anything. if you will create multiple IP subnets, your users will be able to capture traffic from other subnets and all broadcasts reach all PCs.

so if you need to separate one IP subnet from another in a more secure way, you have to use managed switches and place each subnet within its own vlan.

So whats the point of subnetting without managed switches?

and for that one would require a specific router like cisco to create multiple sub interfaces? or can i use a router/firewall solutions like sonicwall?

sonicwall can do the job.
however can you explain why do you need multiple subnets within one L2 broadcast domain?

cost effective i guess would be the main reason. my company is a nonprofit which in a sense we could be switches cheaper but routers are very expensive.

hmm, I don't talk about cost effectiveness.
as for functionality, if you have an office network with unmanaged switches why can you ever need subneting?

Im trying to move them to a subnetted network here shortly. we have just recieved a  grant for it. i was just wondering if it could be done. One of the "higher-ups" brought up subnetting as a choice and fought to the point where blood was visible in his face about how we wouldnt need new hardware for it. Im a CCNA in training and just wanted to know if there is a way he could be right.

you can do subneting without new switches, but what I want to say that there is no point in that.
can you explain me, why would you like to subnet your existing network?

To control traffic. Some of the department generate a lot of traffic accross the network and is interrupting with other critical operations. i was told that subnetting would help with this. if i need to get new switches and routers i will.

I would say a bit other way: you can control traffic (more or less) having good managed switches and without any subneting ;)

but as for now, the only way how you can control traffic - using wireshark and firewall in order to see what is going on withing network.

oh, one more thing: if you configure your existing firewall (btw does it support multineting for the interface?) to filter traffic between your new introduced subnets. I suppose it is the only option you have.
but if I would be your user, I will avoid such filters easy ;)

so you suggest just going with Vlans instead of subnetting?

vlans with subneting is the best option.
but for now you can implement subnets and perform some filtering on your firewall (if it does support multiple IPs on the same interface)

thanks for taking the time and helping me out i really appreciated it. hopefully now i will have a say in the upcoming configuration of the network